Domain user permission

  • Thread starter Thread starter Tan
  • Start date Start date
T

Tan

I am using win2k advance server, SP4. After my users
joined domain, then they could not add or remove programs
on local machine. How do I config group policy to allow
them use this funtion?

Pls. help, thank in advance
 
A user needs to be a power user or local administrator to install most software on a
W2K machine. You could try adding their domain accounts first to the power users
group on their local machines and if that is not adequate you will have to add them
to the local administrators group on the local machine with the understanding that
will allow them to bypass most if not all restrictions applied via Group Policy at
the domain level because they will have the power to create a local account to logon
to and/or remove the machine from the domain. --- Steve
 
Thank you very much, it's done
-----Original Message-----
A user needs to be a power user or local administrator to install most software on a
W2K machine. You could try adding their domain accounts first to the power users
group on their local machines and if that is not adequate you will have to add them
to the local administrators group on the local machine with the understanding that
will allow them to bypass most if not all restrictions applied via Group Policy at
the domain level because they will have the power to
Click to expand...
create a local account to logon
 
Back
Top